IP address

Shodan(more info)

Passive DNS

Tags:

IP blacklists: UCEPROTECT L1
211.41.79.27 is listed on the UCEPROTECT L1 blacklist.

Description: UCEPROTECT-NETWORK list of spam IPs.
Type of feed: primary (feed detail page)

Last checked at: 2026-01-13 08:45:00.454000
Was present on blacklist at: 2026-01-10 00:45, 2026-01-10 08:45, 2026-01-10 16:45, 2026-01-11 00:45, 2026-01-11 08:45, 2026-01-11 16:45, 2026-01-12 00:45, 2026-01-12 08:45, 2026-01-12 16:45, 2026-01-13 00:45, 2026-01-13 08:45
Spamhaus SBL CSS
211.41.79.27 is listed on the Spamhaus SBL CSS blacklist.

Description: The Spamhaus CSS is part of the SBL. CSS listings will have return code 127.0.0.3 to differentiate from regular SBL listings, which have return code 127.0.0.2.
Type of feed: secondary (DNSBL) (feed detail page)

Last checked at: 2026-01-10 00:54:13.759000
Was present on blacklist at: 2026-01-10 00:54

Origin AS: AS4766 - KIXS-AS-KR KIXS-AS-KR-KR
BGP Prefix: 211.41.64.0/19
geo: South Korea; 🕑 Asia/Seoul
hostname: (null)
Address block ('inetnum' or 'NetRange' in whois database): 211.41.64.0 - 211.41.95.255
reserved_range: 0
Shodan's InternetDB: Open ports: 22, 25, 80, 443, 446, 3306, 40001, 40005, 40099, 40892, 41800, 42208, 42420, 42424, 42443, 42901, 43008, 43009, 43200, 44100, 44158, 44300, 44301, 44303, 44304, 44305, 44306, 44308, 44310, 44320, 44334, 44336, 44337, 44340, 44345, 44350, 44420, 44500, 44510, 44520, 44818, 45001, 45003, 45005, 45555, 45666, 45667, 45677, 45786, 45888, 47000, 47080, 47534, 47984, 47990, 48000, 48001, 48002, 48018, 48019, 48020, 48100, 48889, 49121, 49152, 49153, 49200, 49210, 49443, 49501, 49502, 49684, 49688, 49692, 49694, 49767, 50000, 50004, 50005, 50009, 50010, 50012, 50013, 50042, 50050, 50070, 50080, 50100, 50101, 50102, 50103, 50104, 50112, 50202, 50257, 50443, 50805, 50995, 50996, 50998, 51001, 51002, 51003, 51004, 51007, 51106, 51200, 51201, 51235, 51294, 51434, 52200, 52311, 52536, 52869, 52881, 52931, 52951, 53400, 53481, 53482, 53483, 53484, 53485, 53490, 53805, 53806, 54022, 54138, 54327, 54545, 54857, 55000, 55055, 55081, 55350, 55388, 55442, 55443, 55490, 55553, 55554, 57778, 57780, 57781, 57783, 57784, 57785, 57786, 57788, 58378, 58392, 58443, 58532, 58585, 58603, 59012; Tags: database; CPEs: cpe:/a:openbsd:openssh:8.7, cpe:/a:f5:nginx, cpe:/a:oracle:mysql, cpe:/a:apache:http_server
ts_added: 2026-01-10 00:54:10.202000
ts_last_update: 2026-01-13 08:53:52.994000

Warden event timeline

DShield event timeline

Presence on blacklists